Hi there
I have a folder where one person is in control of the content. They need other users to be able to modify existing files but not to be able to create new files. Is this possible?
Thanks in advance.
↧
NTFS Permissions - Modify existing files but not create new ones
↧
Maximum size of a mapped network drive on Windows Server 2016
I have a HP 3par system via File Persona. I need to add mapped network drives to my Windows Server 2016 from at least 50TB. I'm using SMB protocol.
Someone told me the maximum size Win Server 2016 accept is 32TB. I'm currently looking for information but haven't found anything from HP or Microsoft.
Could someone confirm this for me please?
↧
↧
FSRM Active screening on C:\ - is it possible?
Hello
I have created an FSRM file group comprising a single full file name e.g. dog.pub - no wildcards (in case that matters for the purposes of this question).
I have set it to Active screening and created a template that uses the file group.
If I create a new File Screen, tell it use the template or right-click the template to create a new file screen and specify C:\ or C:\Windows the screen is created but the screening type is changed to Passive. I can edit the file screen and set the Screening type to Active, but after clicking OK it reverts to Passive.
I must be missing something here. How can I prevent filename.pub being saved to the C:\ drive or the Windows folder using FSRM?
Thank you.
↧
Chkdsk stuck at 15% scanning an NTFS volume
Dear All,
I need some suggestion to fix a problem with an NTFS file system running on virtual (vmware) Windows Server 2012 R2.
The NTFS filesystem is a 14 TB dynamic spanned volume across two VMDK.
This is used as a network share with a File and Sorage Services role.
Opening the Server Manager > File and Sorage Services section, I saw a warning in the Volumes list: it says "Offline Scan and Repair needed".
So, I ran a chkdsk on that drive in read only mode, and it said that no error was found.
Anyway I have scheduled an offline (on boot) "chkdsk /r /f" for that volume on the weekend (out of office hours) and it started at 20:30 PM.
The scanning percentage reached the 15% soon and after that it stucked for two days.
Then I had to force a restart vefore the office hours to allow people to work with that file share.
At reboot, I ran again a chkdsk in read only mode and this is the result:
Microsoft Windows [Version 6.3.9600]
(c) 2013 Microsoft Corporation. All rights reserved.
C:\Windows\system32>chkdsk e:
The type of the file system is NTFS.
Volume label is xxxxxxxx.
WARNING! F parameter not specified.
Running CHKDSK in read-only mode.
Stage 1: Examining basic file system structure ...
12030720 file records processed.
File verification completed.
2310713 large file records processed.
0 bad file records processed.
Stage 2: Examining file name linkage ...
12846754 index entries processed.
Index verification completed.
0 unindexed files scanned.
0 unindexed files recovered.
Stage 3: Examining security descriptors ...
Security descriptor verification completed.
408018 data files processed.
CHKDSK is verifying Usn Journal...
41705376 USN bytes processed.
Usn Journal verification completed.
The master file table's (MFT) BITMAP attribute is incorrect.
The Volume Bitmap is incorrect.
Windows has checked the file system and found problems.
Please run chkdsk /scan to find the problems and queue them for repair.
14680057 MB total disk space.
12271633 MB in 9302276 files.
2597588 KB in 408019 indexes.
0 KB in bad sectors.
12709287 KB in use by the system.
65536 KB occupied by the log file.
2393476 MB available on disk.
4096 bytes in each allocation unit.
3758094847 total allocation units on disk.
612729885 allocation units available on disk.Now the problem is that the volume is important and can't go down again for days without fixing the problem, so I need tho fix it while it is online or at lease reduce the downtime.
There is a way to achieve this, even with a commercial software?
Thanks
↧
Bizarre File Permission Issue
We have a Windows Server 2019 file server (virtual) running in a Windows 2019 domain as a member server. All the users have domain joined Windows 10 Pro PCs (most 1803 a few 1903) running Office 2019. We have a Word Template running macros that allows users to fill in a form in the template with some sensitive client accounts data so when they click a button in the document it saves the document in a folder that the users only have Write access to and then saves a copy of the form with the sensitive data removed into a Pending folder that the users have Full access to. Only the SYSTEM, Server Admin user, Accounts Manager, I (as the IT Admin) have Full access to the Secure folder. Once the Accounts Manage has processed the form she clicks a button in the document and runs a Macro that moves the Secure documents to a storage location and the Pending copy of the file is deleted. All worked perfectly right up to the point I added some new users. When they use the template the macro works as expected and the documents are created in the Secure and the Pending folders. However no-one can access the file in the Secure folder. Even when logged onto the server as the Domain Admin user I cannot view the Owner through the Security tab when looking at the file's properties, the message is "You must have Read permission to view the properties of this object". We can take ownership and then the file is accessible but this is weird. All other users create the files and the ownership of those files shows as the user that created it but the file has inherited the permissions of the Secure folder, so the Accounts Manager, SYSTEM, Server Admin users and I all have Full access.
As the users do NOT have anything other than Write permission to the Secure folder I cannot log in as the new user to see what permissions the file shows as they are unable to open the folder. I've tried logging into the server and trying the Effective Permissions tab but as I don't even have READ permission I cannot do anything without taking ownership first....not even view Effective Permissions! If I take ownership the problem is immediately solved.
The new users are in all the same Security and Distribution groups as the pre-existing users are yet it's only the two new users that have this problem.
I temporarily granted one user Full Access to the Secure folder. The files they created showed them as the user but with no permissions assigned to the object...
Anyone got any suggestions of where to look to fix this?
Phil Tyler
↧
↧
DFSR preseeding
Hi All,
I would like to seek for your assistance on what will be my steps to build a successful DFSR for my 2 different offices, end state is that i have 2 file server, FS1 and FS2 that has DSFR and replication is running to our 100mbps leased line. Below are the steps on my mind.
- both server are still in Site A physically.
Step 1. Configure File Server 1 DFS namespace and include all my existing files (Is this correct, or should i add the FS2 already upon creating the namespace)
Step 2. Create DSFR and add my FS1.(is this correct i will create DFSR with 1 server only first?)
Step 3. Preseed all files to FS2 from FS1 using robocopy.(What are the steps that DFSR consider the robocopy as preseed)
Step 4. once done on preseeding, Ship the physical server FS2 to my second site.
Step 5. Add the FS2 to the DFSR ( This is the part i am worrying, since FS2 is not the updated one, i'm worrying that FS2 might overwrite the updated files on FS1.)
If possible can you please help me on the step by step. Thank you all.
edit - both FS 1 and FS2 is Window Server 2016↧
Windows Server 2012 NFS server passwd sample
Does anyone have a sample passwd file they use for identity mapping?
I placed a passwd file in C:\Windows\System32\Drivers\etc with the following contents:
root:x:0:0:root:/root:/bin/bash
On reboot, Windows did not accept the file, because in the event log under Applications and Services\Microsoft\Windows\ServericsForNFS-Server\IdentityMapping I get a message warning that NFS file access is impaired:
Server for NFS is not configured for either Active Directory Lookup or User Name Mapping.
Without either Active Directory Lookup or User Name Mapping configured for the server, or Unmapped UNIX User Access configured on all shares, Server for NFS cannot grant file access to users.
Configure Server for NFS for either Active Directory Lookup or User Name Mapping using the Nfsadmin command-line tool, or Unmapped UNIX User Access using the Nfsshare command-line tool.
↧
Shared files Permission for Domain users
Hello,
Whe I maped drive, and assign permission to Domain suers. It does not work.
I have to add everyone permission to that folder. What did I lose? or It is to grant Everyone first and then Domain users
get permission to share the folder?
brgds
Liu Wei
↧
Saving Excel spreadsheet to network share generates .tmp files which do not automatically delete
We are having a strange issue with Microsoft Excel and saving to a network share. When anyone (users or admins) saves changes to an Excel workbook saved in a particular network share it generates a .tmp file. From my research this is to be expected, but the temp files should clear when the workbook or Excel is closed.
These files are building up and so far the only way to get rid of them has been to manually delete them.
From my research on this issue a lot of articles have been opened with similar problems, but none of the solutions seemed to have fixed the problem. I have found that if I grant Full Control permissions to 'Everyone' on this folder the tmp files do not appear, but I can only do this for testing purposes. I have tested opening and saving an Excel document with a domain admin account (which also has Full Control access to the folder) and the tmp files still generate unless the 'Everyone' group has Full Control permissions.
Does anyone have any suggestions on how to resolve this? The issue occurs regardless of what Operating system the client is using or version of office. I have tested this with Windows 7 and Windows 8, along with Office 2010 and 2013.
↧
↧
Work Folders External Setup
My Setup: All Virtual
Server1 - WS2019 - Fileserver on .local domain with work folders and IIS setup with wildcard cert.
Server2 - WS2016 - Domain Controller .local private domain with zone created for our external domain .com
Server3 - WS2019 - not domain joined server
I have Work Folders working internally, however I am limited on the amount of virtual cores so my questions are...
If I setup WAP & ADFS
1: Can I install ADFS on the domain controller. I dont have enough specs to create a new server for just ADFS. I want to be able to install ADFS on the DC.
2: WAP instructions state the server must have 2 NIC cards, external and internal. Can I just use one NIC with DNS entries for external and internal?
↧
Does SMB (whatever version) is needed for File and print sharing?
Hi everyone,
Someone just brought this up...and I would like to ask... We have a file server to share files. That is running Win2012 and 2008. Do you think SMB is needed for the file sharing access from the users? If not, can I disable it by removing it from Roles and
Features?
Thank you for your help!
Takami Chiro
↧
Windows server 2012 Random Indexing disappearing then need to rebuild
I need more info on ways to troubleshoot this to fix this from happening. It happens at random times
EventViewer gives me the following info:
- (Level) Warning - (Source) Search - (Event ID) 1008 - (Task Category) Search
The windows Search Service is starting up and attempting to remove the old search index {Reason:Index Corruption}.
↧
Win server 2019 - Virtual disk PArity error
Hello,
I'll try to create a storage pool, with 3 iscsi disks of 4TB eatch. The storage pool works fine but when try to add virtual disk parity, gives me an error with no resources available. This appens on Gui and powershell. With windows server 2016 can create fine but on 2019 1809 build 17763.805
What i do? Downgrade to 2016?? This is not solution...
Wait for your help please.
↧
↧
Move 2008 server cluster file shares to a new 2012 stand alone server?
I have a windows 2008 file cluster server. I need to move the existing shares on the 2008 cluster to a NEW windows 2012 stand alone server.
I have done the robocopy to move the data to the new 2012 server without issue.
The file security has come over without issue.
The shares have not come over.
If I try to export the registry keys from the current 2008 cluster file server, the path to the key is differnet than the path on the windows 2012 location.
The path to the registry key on the window 2008 cluster server share is:
HKEY_LOCAL_MACHINE\Cluster\Resources\4fd56d51-475e-43a5\Parameters\shareIcreated
The path to the new location on the windows 2012 stand alone server is:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares]
It is obvious that the 2 registry paths don't match.
How can I export the shares off the 2008 cluster server to the new 2012 server location?
Is there a tool that can do that export/import?
The File Server Migration Toolkit does not appear to have the functionality. Can that tool export just the export shares information?
Any ideas out there??
Thank you
↧
Services.msc lists Windows Search as "Starting"
I'm running on Windows Server 2016 Standard and got the same issue with John Selma on his thread in Microsoft Windows forum with title "Services.msc lists Windows Search as 'Starting' --- stays there forever"
Here I quote his thread since I can't post an URL link in this thread :
##
I'm running Windows 10. I first noticed a problem clicking on the "This PC" folder. The resulting display is mostly blank, except for the moving green bar and the phrase "working on it". Same result if I click on the "Network" icon.
I ran services.msc and saw that "Windows Search" was listed as "Starting". It stays there forever and never advances to "running". All options such as "restart" are grayed out. Startup type is set as Automatic (Delayed start).
I ran sfc /scannow 3 times and it didn't find any problems.
I ran msconfig, disabled Windows Search, rebooted and "This PC" works as it should, although of course that means I'm running without the search service. Re-enabling Windows Search and rebooting puts me back where I began with Windows Search stuck at "Starting" and "This PC" "working on it".
I can't think of anything significant that occurred between the last time "This PC" worked and the first time it didn't work.
Any suggestions would be appreciated.
##
I can't get troubleshoot as He did because no Troubleshoot feature built into Windows Server 2016.
Can anyone help me with this issue? Because it's affect the client PC too. When search files from client PC which stored in Server, the search takes too long and sometimes can't get the results.
Thank you.
↧
NTFS permissions report
Hi, I am from Spain, excuse my bad English
I have a file server with 85 share folders. this folders contain very subfolders
I want to generate a NTFS permissions report for all folders and subfolders that display all users and right levels
Thanks in advantage
↧
Best reporting tools for NTFS permissions on File Server
I am not sure if this is the correct forum or not, but I have an NTFS permissions question on Windows 2003 r2. Basically we have a file server that has all kinds of different permissions on different folders, etc. Over the past few years we have had Admins go in and give some of our Techs permissions to stuff they should not have permissions to and this is on various subfolders throughout the file server. I can not think of a simple way for us to remove these permissions as we can not just remove them at the top level or reset everything underneath to be the same as some of the permissions at the top level, etc.
So I guess we need a really good report of the user permissions on each folder(thousands) and then for us to search through those and try to find where our Techs have permissions? Anyone have any ideas on the best tools to run that report, etc or any other ideas on this?
Thanks,
Dan
Dan Heim
So I guess we need a really good report of the user permissions on each folder(thousands) and then for us to search through those and try to find where our Techs have permissions? Anyone have any ideas on the best tools to run that report, etc or any other ideas on this?
Thanks,
Dan
Dan Heim
↧
↧
Cannot install "SMB 1.0/CIFS File Sharing Support" role on server 2019 data center.
Hi Guys
I have a server 2019 data center on azure and I cannot seem to be able to install the SMB 1.0 to be able to connect to my on-prem AD.
I have downloaded the 2019 data center image and mounted it on this server and further added the source path for installing the role. And it didnt fix the issue.
I further tried to install it using Powershell wiht below commands:
Get-WindowsOptionalFeature -Online -FeatureName "SMB1Protocol"
FeatureName : SMB1ProtocolDisplayName : SMB 1.0/CIFS File Sharing Support
Description : Support for the SMB 1.0/CIFS file sharing protocol, and the Computer Browser protocol.
RestartRequired : Possible
State : DisabledWithPayloadRemoved
CustomProperties :
ServerComponent\Description : Support for the SMB 1.0/CIFS file sharing protocol, and the Computer Browser protocol.
ServerComponent\DisplayName : SMB 1.0/CIFS File Sharing Support
ServerComponent\Id : 487
ServerComponent\Type : Feature
ServerComponent\UniqueName : FS-SMB1
ServerComponent\Deploys\Update\Name : SMB1Protocol
When I try to enable it I get the following error that says source file could not be found.
C:\Users\myserver> Enable-WindowsOptionalFeature -Online -FeatureName smb1protocol -source e:\sources\install.wim:4Enable-WindowsOptionalFeature : The source files could not be found.
Use the "Source" option to specify the location of the files that are required to restore the feature. For more information on specifying
a source location, see http://go.microsoft.com/fwlink/?LinkId=243077.
At line:1 char:1
+ Enable-WindowsOptionalFeature -Online -FeatureName smb1protocol -sour ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [Enable-WindowsOptionalFeature], COMException
+ FullyQualifiedErrorId : Microsoft.Dism.Commands.EnableWindowsOptionalFeatureCommand
I also tried installing it and that didnt work either.
C:\Users\myserver> install-windowsfeature SMB1Protocol -Source wim:E:\sources\install.wim:4install-windowsfeature : ArgumentNotValid: The role, role service, or feature name is not valid: 'SMB1Protocol'. The name was not found.
At line:1 char:1
+ install-windowsfeature SMB1Protocol -Source wim:E:\sources\install.wi ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : InvalidArgument: (SMB1Protocol:String) [Install-WindowsFeature], Exception
+ FullyQualifiedErrorId : NameDoesNotExist,Microsoft.Windows.ServerManager.Commands.AddWindowsFeatureCommand
Success Restart Needed Exit Code Feature Result
------- -------------- --------- --------------
False No InvalidArgs {}
I am really stuck.. I would appericiate if someone could guide me.
↧
Robocopy with /mir to mirror data to external drive on different server.
Hello
I am having an issue with the /mir switch in Robocopy and would appreciate a little help, please.
I have two virtual servers hosting data. I have another physical server named Orion with a 5TB external USB device named 'Trip' attached to it. The virtual servers are both hosted on another separate physical host:
Physical Server 1 = hosts two virtual servers
Physical Server 2 = 5TB USB external drive named Trip attached to it
I have used Robocopy to copy the data from the virtual servers to Trip. In this example I have copied the entire D:\ drive but excluded a folder named WSUS:
Robocopy "D:\\" "\\orion\trip\\" /XD "D:\WSUS\\" /E /XO /R:0 /W:0
This works fine. The problem, of course, is that because the /XO switch is used deleted data is left on the target and thus eventually the target will run out of space. I decided to use Robocopy with the /mir switch to keep the source and target destinations synchronised:
Robocopy "D:\\" "\\orion\trip\\" /MIR /XD "D:\WSUS\\" /R:0 /W:0
But, folders which exist on the source D:\\ disappeared from the target ..\Trip\\
Everything I've read says this should not happen. I was wondering if mirroring data from two virtual servers to a USB drive on a physical server might affect Robocopy's performance? Or, does the switch order matter - for example, should \MIR come after /XD"D:\WSUS\\"?
Thank you.
↧
Creating DFS Namespace via GUI
Hi All,
I would like to request again for your assistance on the issue im encountering. We are trying to create a new namespace and when we are trying to click browse on the namespace server wizard, we are encountering error "Value does not fall within the expected range"
↧